Learn Everything

Paths/Backend Engineer/Authentication & Authorisation / OAuth & Scopes

Challengeadvancedubuntu:24.04Ask AI

Write the Token Policy

Short-lived access tokens, rotating refresh tokens, and a revocation path that actually works. Write the policy.

Validator

⏱ 0:00

IDLE — checks run live as you type commands; submit when done

01Requirements

live checks
  • File ~/.auth/token-policy.md exists○
  • The policy states the lifetime of each kind of token○
  • The policy states how refresh tokens rotate and how access is revoked○

02Walkthrough

1 of 4 revealed
  1. 01

    Create the auth directory

    The token policy lives with the rest of the security configuration.

    mkdir -p ~/.auth
  2. 3 locked · each failed submit reveals one

03Stuck?

0 of 3 revealed

Take a hint without losing the lab — each one points at the thing to look at, not at the answer.

04AI Tutor

guides, never solves

Tell me what you're stuck on — I'll nudge, not solve. Which requirement are you looking at?

04Notebook

saved locally in this browser

learner@lab — ubuntu:24.04

↑/↓ recalls commands · Ctrl+Enter submits · type help for the command list

← Previous lab

Define the Scopes

Authentication & Authorisation

Next lab →

Choose Methods That Are Safe to Retry

HTTP & Networking